openssl生成自签证书ssl 0x1 方案一 私钥 openssl genrsa -out server.key 1024 证书 openssl req -new -x509 -days 3650 -key server.key -out server.crt -subj "/C=CN/ST=mykey/L=mykey/O=mykey/OU=mykey/CN=domain1/CN=domain2/CN=domain3" 根据实际修改里面的内容，适合比较熟练的人 0x2 方案二 openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout cert.key -out cert.pem # 支持配置区域和fqdn域名 openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \ -keyout nginx.key \ -out nginx.crt \ -subj "/C=CN/ST=Hubei/L=Wuhan/O=Technology Co., Ltd./OU=Development/CN=59.xx.xx.xx/emailAddress=admin@example.com" 0x3 方案三 openssl genrsa -out <foo>.key 2048 openssl req -new -key <foo>.key -out <foo>.csr openssl x509 -req -days 365 -in <foo>.csr -signkey <foo>.key -out <foo>.cert